Reducing information dependency does not cause training data privacy. Adversarially non-robust features do

Rasmus Torp, Shailen K. Smith, Adam Breuer

The paper shows that training data privacy against model inversion attacks is not due to memorization but to the presence of non‑robust adversarial features, and introduces a train…